Abiomed, part of Johnson & Johnson MedTech, is a leading provider of medical devices that provide circulatory and respiratory support, with a mission of recovering hearts & saving lives. Abiomed's "Patients First!" culture drives our skilled workforce and strong relationships with clinicians. Our innovative product portfolio and robust pipeline provide us the incredible opportunity to bring lifesaving technology to more patients around the world than ever before. Founded in 1981, Abiomed has a proven track record for growth, integrity and innovation.

I Am Abiomed | I Am Heart Recovery | Patients First!

ABIOMED is redefining team-driven success while reshaping heart recovery. Here, new ideas are welcomed and encouraged, learning is constant, and our dynamic setting enables positive people to do profoundly important work.

As the solutions we provide to patients and health care providers evolve from a technological standpoint, we must remain vigilant in our cybersecurity efforts to ensure we are providing the highest quality devices. We accomplish this by incorporating cybersecurity activities across the total-product-lifecycle of our solutions and integrating these processes with our Quality Management System.

Are you passionate about security and interested in joining a community of collaborative colleagues working in a Patient First! culture? If that’s you, Abiomed has an immediate opportunity for a Product Security Engineer to join the Product Security team to help ensure security is implemented by design for this top-performing medical device company. This is an exciting opportunity to impact development initiatives that will shape future product development and industry standards. You will own the Product Security process that includes both pre-market and post-market processes engineering teams leverage throughout the product development lifecycle. If you are eager to leverage your security risk and compliance skills to make a difference and directly impact patient lives, this could be perfect for you.

Primary Duties And Responsibilities

• Partner with engineering teams (cloud, console, pump, etc.) to drive successful adherence to Abiomed’s product security program.
• Create, update, and mature product security processes.
• Deliver documentation for pre-market development activities including security plans, architecture and data flow diagrams, threat models, requirements, SBOM, and risk documentation.
• Monitor and drive post-market vulnerability management activities, with adherence to strict timelines.
• Support compliance certification activities, such as SOC2, FedRAMP, ISO 27001, etc.
• Identify, research, evaluate, and integrate new compliance requirements and industry standards/trends into the product security program.
• Maintain relationships with Abiomed’s Information Sharing and Analysis Organizations.
• Guide teams to make decisions that balance business needs with security objectives.
• Thinks across organizational boundaries and empathizes with customers, both internal and external
• Perform other related duties and responsibilities, as assigned.

Job Qualifications

• Bachelor’s degree in Computer Science, Information Systems, or related field.
• 4+ years industry experience in Information Security and/or regulatory compliance
• Working knowledge of regulatory standards and compliance frameworks (e.g., NIST Cybersecurity Framework, ISO27001, SOC2, HIPAA, GDPR)
• Experience with security risk management techniques and tactics
• Experience working in a regulated environment, FDA-regulated preferred.
• Demonstrated organizational skills, attention to detail, the ability to handle multiple assignments simultaneously in a timely manner and be able to meet assigned deadlines.
• Committed to working with a sense of urgency and embracing new challenges.
• Strong communication and interpersonal skills

Abiomed is an Equal Opportunity Employer committed to a diverse workforce. Abiomed will not discriminate against any worker or job applicant on the basis of race, color, religion, gender, gender identity, national origin, ancestry, age, sexual orientation, gender identity, marital or civil partnership status, pregnancy, gender reassignment, non-job related mental or physical disability, genetic information, veteran status, military service, application for military service, or membership in any other category protected under law. Abiomed maintains a drug-free workplace.